This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Uy3ys-nSv2z06iOsWIhlKc85XNk.roa File: Uy3ys-nSv2z06iOsWIhlKc85XNk.roa (raw, json) Hash identifier: 2YEBqEQjSApG0xmkrgbwP8dVN1caGGqbA7l5pUFPq34= Subject key identifier: 53:2D:F2:B3:E9:D2:BF:6C:F4:EA:23:AC:58:88:65:29:CF:39:5C:D9 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 019B78A2EC4CD5268D873BA2920F66057BE5 Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Uy3ys-nSv2z06iOsWIhlKc85XNk.roa Signing time: Thu 01 Jan 2026 08:18:21 +0000 ROA not before: Thu 01 Jan 2026 08:18:21 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 56913 IP address blocks: 85.237.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Jan 2026 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:a2:ec:4c:d5:26:8d:87:3b:a2:92:0f:66:05:7b:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: Jan 1 08:18:21 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=532df2b3e9d2bf6cf4ea23ac58886529cf395cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:be:be:7d:b5:34:f8:5b:5d:54:83:db:d0:83: 3d:0a:15:53:2c:48:2f:6d:1d:ae:3f:82:97:3d:c9: 45:11:d4:31:6c:86:a1:04:64:43:cb:dc:cb:09:99: a3:bd:c7:ee:7a:0a:c2:de:14:b2:e6:0f:75:58:82: bd:01:3c:df:da:25:f7:af:97:48:07:cf:b5:e7:64: bd:e6:be:5d:23:24:12:a9:4f:5b:6b:f8:a2:54:43: b7:88:fb:4e:96:71:a2:00:1d:4a:89:92:5c:aa:41: 82:5a:5c:14:aa:4f:e2:f0:2e:2e:ff:7d:2e:75:03: 73:0a:ee:29:d2:08:aa:ce:64:c7:35:82:f7:70:fd: 62:1b:2d:86:b5:2c:15:f9:6c:20:3d:ce:9a:2f:14: c6:01:2d:d5:3a:52:2a:fd:d6:5d:a4:a8:53:1f:55: 82:a6:6e:0a:f1:72:cd:be:11:36:d3:03:f7:a5:bf: 14:39:7a:3f:66:05:0a:d7:f1:2f:f9:a9:6d:7e:6b: de:62:b5:28:e0:d1:66:c6:6d:11:2c:fc:a8:9b:dd: 59:be:d5:92:01:82:62:1a:2d:e7:f4:4b:0b:06:b6: 18:aa:fa:7d:0e:1b:63:c1:5e:99:ce:6b:32:e6:08: 51:1c:29:88:0c:d3:08:24:5d:33:b6:49:20:e8:e9: f1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2D:F2:B3:E9:D2:BF:6C:F4:EA:23:AC:58:88:65:29:CF:39:5C:D9 X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/Uy3ys-nSv2z06iOsWIhlKc85XNk.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.237.71.0/24 Signature Algorithm: sha256WithRSAEncryption 26:e9:1f:09:25:b0:d1:0a:8e:6c:f3:fb:d8:03:55:85:16:ff: ac:b5:3e:ca:5b:3f:ba:4e:27:db:f4:ea:62:b2:c8:b5:34:49: 15:cf:b4:6e:d5:08:dc:fe:e2:5a:48:23:91:00:3c:72:f6:5e: cb:ea:2a:b9:f7:61:3d:ae:0b:bf:bd:f8:e1:a4:64:2c:16:e6: 65:07:dc:86:b5:50:6e:77:f8:22:53:8c:76:80:74:28:cb:66: 7e:dc:28:ca:1b:cd:c5:e3:48:11:6c:d5:dd:85:87:45:2a:4a: 2b:24:47:44:06:53:27:63:21:f1:96:ab:7a:f8:2a:5f:c9:cd: 8c:9d:38:1e:3f:3f:3a:5e:59:e8:6c:31:a5:b5:60:45:81:c7: 61:9b:dc:f6:05:c8:1a:54:cc:74:62:3c:ea:dd:83:14:db:96: 51:b8:c9:12:96:1c:04:01:f0:ae:c2:7e:65:c0:0c:ec:63:bc: 64:b6:01:26:ce:2f:f8:86:f6:87:ab:35:c9:5a:37:8d:10:5d: 8d:f6:2c:44:97:e5:81:ec:cf:34:09:e3:0a:0b:d1:86:43:fe: 45:cb:11:76:8a:5e:8d:fd:d3:a6:23:7c:04:f4:3d:5a:4e:bd: 0f:b8:0b:e5:b0:36:c8:5c:64:4d:66:28:4a:a3:4b:69:6e:36: b5:88:7a:1c -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4ouxM1SaNhzuikg9mBXvlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjYwMTAxMDgxODIxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg1MzJkZjJiM2U5ZDJiZjZjZjRlYTIzYWM1ODg4NjUyOWNmMzk1Y2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmL6+fbU0+FtdVIPb0IM9ChVTLEgv bR2uP4KXPclFEdQxbIahBGRDy9zLCZmjvcfuegrC3hSy5g91WIK9ATzf2iX3r5dI B8+152S95r5dIyQSqU9ba/iiVEO3iPtOlnGiAB1KiZJcqkGCWlwUqk/i8C4u/30u dQNzCu4p0giqzmTHNYL3cP1iGy2GtSwV+WwgPc6aLxTGAS3VOlIq/dZdpKhTH1WC pm4K8XLNvhE20wP3pb8UOXo/ZgUK1/Ev+altfmveYrUo4NFmxm0RLPyom91ZvtWS AYJiGi3n9EsLBrYYqvp9DhtjwV6Zzmsy5ghRHCmIDNMIJF0ztkkg6Onx0QIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFFMt8rPp0r9s9OojrFiIZSnPOVzZMB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvVXkzeXMtblN2MnowNmlPc1dJaGxLYzg1WE5rLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVe1HMA0G CSqGSIb3DQEBCwUAA4IBAQAm6R8JJbDRCo5s8/vYA1WFFv+stT7KWz+6Tifb9Opi ssi1NEkVz7Ru1Qjc/uJaSCORADxy9l7L6iq592E9rgu/vfjhpGQsFuZlB9yGtVBu d/giU4x2gHQoy2Z+3CjKG83F40gRbNXdhYdFKkorJEdEBlMnYyHxlqt6+Cpfyc2M nTgePz86XlnobDGltWBFgcdhm9z2BcgaVMx0Yjzq3YMU25ZRuMkSlhwEAfCuwn5l wAzsY7xktgEmzi/4hvaHqzXJWjeNEF2N9ixEl+WB7M80CeMKC9GGQ/5FyxF2il6N /dOmI3wE9D1aTr0PuAvlsDbIXGRNZihKo0tpbja1iHoc -----END CERTIFICATE-----Generated at Wed Jan 21 01:19:13 2026 by rpki-client